**** BEGIN LOGGING AT Mon Mar 25 03:00:06 2019 Mar 25 15:07:44 * hendersa waves to everyone. Mar 25 15:08:43 Today is the day that the GSOC student application period begins. Mar 25 15:09:24 The application period runs from 25 March through 09 April. Mar 25 15:10:04 Start your rough drafts for your proposals, ask questions, and get feedback from the mentors if you wish to be seriously considered. Mar 25 17:42:42 Hello, I am interested in applying to GSOC 2019. I posted a couple of ideas related to security in BB on the mailing list. Is there anyone interested in being my mentor for the same? Thanks. Mar 25 17:49:39 guitarman0603[m]: Hello. Last I checked, I was the only mentor listed with an interest in the security projects. Mar 25 17:50:55 I did review our GSOC google group this morning and saw the reference to CamFlow. Mar 25 17:55:17 Offhand, I'm not sure that a security analysis of the BeagleBoard systems would be all that useful for users of the system. The code our OS packages are built from are inherited from upstream Ubuntu, so we'd have the same security issues and updates they would have. Mar 25 17:55:54 Dynamic whole-system analysis is also a bit tricky on embedded systems, as there is the overhead imposed on the system to consider. Mar 25 17:57:35 While I didn't propose any topic areas for security, you'll notice that they are turning the BeagleBoard/Bone platforms into security appliances to perform testing, interfacing, and protection. Mar 25 17:58:38 Rather than focus on making the BB platforms more secure, I suggest trying to find a way to use the BB platforms to make other platforms secure. Turn a BB or PocketBeagle into a testing tool of some sort. Mar 25 18:37:13 * guitarman0603[m] sent a long message: < https://matrix.org/_matrix/media/v1/download/matrix.org/pHQYmfJHJNXQCKEHISbacDsI > Mar 25 18:43:20 I might be interested in mentoring a security project, but it all depends upon the quality of the proposal and other proposals that are submitted. Mar 25 18:44:15 I have other topics that I am watching, as well. We will have a limited number of slots for students assigned to us by Google, so we have to go with the best projects to make the most of GSoC. Mar 25 18:45:48 The best advice that I can give you is to spend some time thinking of a project that fulfills a need. Mar 25 18:46:34 You have a few weeks to write your proposal. Mar 25 18:47:32 Our topic suggestions are there to help guide you in selecting a topic for your proposal. They aren't necessarily homework assignments where we tell you exactly what we want. Mar 25 19:25:45 * guitarman0603[m] sent a long message: < https://matrix.org/_matrix/media/v1/download/matrix.org/RTUVjbbqrPNcxKlJAnpZHvSM > Mar 25 19:29:06 You can discuss your proposal with any of the mentors either here in the channel or on our GSoC Google Group. I usually watch both. Mar 25 19:29:27 Do you think this can fulfil a need? I can chose an application domain such as deploying a open source artificial pancreas system (openAPS), which injects insulin the body depending on the blood glucose levels of the person. So using BB as a part of this entire closed-loop system I can use a BBB to test for intrusions or penetration testings of sorts. Mar 25 19:29:28 I can also chose a different domain like self-driving cars. What do you think about that? Mar 25 19:30:54 If we want to use BB as testing tool. Delivering it with some real-application can be more useful than showing that these are the intrusions we can use BB for. Mar 25 19:32:35 The BeagleBone Black has a CAN bus interface, making it useful for OBD interfacing with cars. However, you'd probably need a car to test with. Mar 25 19:32:54 I was thinking about using a simulator? Mar 25 19:33:19 CARLA is an opensource simulator for self driving cars Mar 25 19:33:37 Are you thinking with respect to hardware level or software level? Mar 25 19:33:48 I was thinking more in terms of software level. Mar 25 19:34:05 Well, keep in mind that vulnerabilities are typically implementation-specific. If you find a vulnerability in a simulator, that vulnerability is probably specific to that simulator. Mar 25 19:34:54 GSoC is for the development of software. Because BeagleBoard.org has a focus on hardware, we're looking for software-based projects that use bb.org hardware in a useful way. Mar 25 19:35:47 Yes and for that I think that using a simulator for now is the best option. Unless you can provide me with some protoype model for testing purposes Mar 25 19:35:49 It could be a reference implementation, an API to use bb.org hardware more effectively, or software that turns bb.org hardware into a useful tool. Mar 25 19:36:52 Think about what you'd like to attempt and put together a proposal. Submit it as a draft to the GSoC website and let the mentors review it and give feedback. Mar 25 19:37:37 Alright. That sounds good. Mar 25 19:40:37 Also, make sure you complete the general requirements: https://elinux.org/BeagleBoard/GSoC/Ideas#General_requirements **** ENDING LOGGING AT Tue Mar 26 02:59:56 2019